Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Virus Logs

    Scheduled Pinned Locked Moved 2.3-RC Snapshot Feedback and Issues - ARCHIVED
    4 Posts 2 Posters 2.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      brianc69
      last edited by

      I'm logging many viruses on the dashboard. I see no way to view which client is causing the hits nor what the virus is and how to reset the log and widget count. Is this an oversite?

      Squid Version	  3.5.12
Antivirus Scanner	  ClamAV: N/A    C-ICAP 0.3.5 +  SquidClamav 6.10
Antivirus Bases	
Database	Date	Version	Builder
daily.cld	2016.02.17	21384	neo
bytecode.cvd	2016.01.25	271	anvilleg
main.cvd	2013.09.17	55	neo
safebrowsing.cvd	2016.02.17	44414	google
Last Update	N/A
Statistics	Found 217 virus(es) total.
      1 Reply Last reply Reply Quote 0
      • B
        brianc69
        last edited by

        I found this but no idea which client, what virus, what url…

        C-ICAP Virus Table
C-ICAP - Virus Logs
Date-Time	Message	Virus	URL	Host	User
17.02.2016 17:40:02	VIRUS FOUND		403		
17.02.2016 17:40:01	VIRUS FOUND		403		
17.02.2016 17:35:02	VIRUS FOUND		403		
17.02.2016 17:35:01	VIRUS FOUND		403		
17.02.2016 17:30:02	VIRUS FOUND		403		
17.02.2016 17:30:01	VIRUS FOUND		403		
17.02.2016 17:25:02	VIRUS FOUND		403		
17.02.2016 17:25:01	VIRUS FOUND		403		
17.02.2016 17:22:17	VIRUS FOUND		403		
17.02.2016 17:20:02	VIRUS FOUND		403
        1 Reply Last reply Reply Quote 0
        • MikeV7896M
          MikeV7896
          last edited by

          I think this might be a topic for the Packages forum, not directly related to the beta… unless the logs on 2.3 are different than the logs on 2.2.6...

          The S in IOT stands for Security

          1 Reply Last reply Reply Quote 0
          • B
            brianc69
            last edited by

            There is a basic log viewer in squidguard I believe but the layout is extremely differant then 2.2.6. There is no way to clear the log. What I posted above was caused but enabling the wrong option in squid. It cause ALOT of false positives and blocked good pages. Basically what happen was a url that triggered a content block was reported as a virus. All is well with the exception of not being able to reset the widget count aka log clear?

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.